# Vulnerabilities published in 2025


- [MAL-2025-67910](https://insights.sbomify.com/MAL-2025-67910/): Malicious code in dynamic-azure-gerbil (npm) (malicious package)
- [MAL-2025-6791](https://insights.sbomify.com/MAL-2025-6791/): Malicious code in powerbi-visuals-powerkpi (npm) (malicious package)
- [MAL-2025-67909](https://insights.sbomify.com/MAL-2025-67909/): Malicious code in dynamic-amaranth-planarian (npm) (malicious package)
- [MAL-2025-67908](https://insights.sbomify.com/MAL-2025-67908/): Malicious code in dying-green-shrimp (npm) (malicious package)
- [MAL-2025-67907](https://insights.sbomify.com/MAL-2025-67907/): Malicious code in dying-green-gopher (npm) (malicious package)
- [MAL-2025-67906](https://insights.sbomify.com/MAL-2025-67906/): Malicious code in dying-crimson-jellyfish (npm) (malicious package)
- [MAL-2025-67905](https://insights.sbomify.com/MAL-2025-67905/): Malicious code in dutch-aquamarine-landfowl (npm) (malicious package)
- [MAL-2025-67904](https://insights.sbomify.com/MAL-2025-67904/): Malicious code in dutch-aqua-raven (npm) (malicious package)
- [MAL-2025-67903](https://insights.sbomify.com/MAL-2025-67903/): Malicious code in dusty-moccasin-aphid (npm) (malicious package)
- [MAL-2025-67902](https://insights.sbomify.com/MAL-2025-67902/): Malicious code in dusty-magenta-quelea (npm) (malicious package)
- [MAL-2025-67901](https://insights.sbomify.com/MAL-2025-67901/): Malicious code in dusty-jade-piranha (npm) (malicious package)
- [MAL-2025-67900](https://insights.sbomify.com/MAL-2025-67900/): Malicious code in dusty-black-kiwi (npm) (malicious package)
- [MAL-2025-6790](https://insights.sbomify.com/MAL-2025-6790/): Malicious code in productboard-html-to-image (npm) (malicious package)
- [MAL-2025-679](https://insights.sbomify.com/MAL-2025-679/): Malicious code in package-maintenance (npm) (malicious package)
- [MAL-2025-67899](https://insights.sbomify.com/MAL-2025-67899/): Malicious code in dusty-apricot-fox (npm) (malicious package)
- [MAL-2025-67898](https://insights.sbomify.com/MAL-2025-67898/): Malicious code in dusty-amaranth-lion (npm) (malicious package)
- [MAL-2025-67897](https://insights.sbomify.com/MAL-2025-67897/): Malicious code in dull-purple-turkey (npm) (malicious package)
- [MAL-2025-67896](https://insights.sbomify.com/MAL-2025-67896/): Malicious code in dull-amber-boar (npm) (malicious package)
- [MAL-2025-67895](https://insights.sbomify.com/MAL-2025-67895/): Malicious code in due-violet-ant (npm) (malicious package)
- [MAL-2025-67894](https://insights.sbomify.com/MAL-2025-67894/): Malicious code in due-tomato-pigeon (npm) (malicious package)
- [MAL-2025-67893](https://insights.sbomify.com/MAL-2025-67893/): Malicious code in due-orange-giraffe (npm) (malicious package)
- [MAL-2025-67892](https://insights.sbomify.com/MAL-2025-67892/): Malicious code in due-magenta-starfish (npm) (malicious package)
- [MAL-2025-67891](https://insights.sbomify.com/MAL-2025-67891/): Malicious code in due-fuchsia-scallop (npm) (malicious package)
- [MAL-2025-67890](https://insights.sbomify.com/MAL-2025-67890/): Malicious code in due-amaranth-swordtail (npm) (malicious package)
- [MAL-2025-6789](https://insights.sbomify.com/MAL-2025-6789/): Malicious code in dionisio (npm) (malicious package)
- [MAL-2025-67889](https://insights.sbomify.com/MAL-2025-67889/): Malicious code in dual-violet-anglerfish (npm) (malicious package)
- [MAL-2025-67888](https://insights.sbomify.com/MAL-2025-67888/): Malicious code in dual-sapphire-herring (npm) (malicious package)
- [MAL-2025-67887](https://insights.sbomify.com/MAL-2025-67887/): Malicious code in dual-olive-cougar (npm) (malicious package)
- [MAL-2025-67886](https://insights.sbomify.com/MAL-2025-67886/): Malicious code in dual-maroon-butterfly (npm) (malicious package)
- [MAL-2025-67885](https://insights.sbomify.com/MAL-2025-67885/): Malicious code in dual-azure-ostrich (npm) (malicious package)
- [MAL-2025-67884](https://insights.sbomify.com/MAL-2025-67884/): Malicious code in dry-rose-iguana (npm) (malicious package)
- [MAL-2025-67883](https://insights.sbomify.com/MAL-2025-67883/): Malicious code in dry-peach-booby (npm) (malicious package)
- [MAL-2025-67882](https://insights.sbomify.com/MAL-2025-67882/): Malicious code in dry-lime-wasp (npm) (malicious package)
- [MAL-2025-67881](https://insights.sbomify.com/MAL-2025-67881/): Malicious code in dry-lavender-primate (npm) (malicious package)
- [MAL-2025-67880](https://insights.sbomify.com/MAL-2025-67880/): Malicious code in dry-coffee-butterfly (npm) (malicious package)
- [MAL-2025-6788](https://insights.sbomify.com/MAL-2025-6788/): Malicious code in gsochub (npm) (malicious package)
- [MAL-2025-67879](https://insights.sbomify.com/MAL-2025-67879/): Malicious code in dry-blush-scallop (npm) (malicious package)
- [MAL-2025-67878](https://insights.sbomify.com/MAL-2025-67878/): Malicious code in dry-aqua-platypus (npm) (malicious package)
- [MAL-2025-67877](https://insights.sbomify.com/MAL-2025-67877/): Malicious code in drunk-white-basilisk (npm) (malicious package)
- [MAL-2025-67876](https://insights.sbomify.com/MAL-2025-67876/): Malicious code in drunk-salmon-starfish (npm) (malicious package)
- [MAL-2025-67875](https://insights.sbomify.com/MAL-2025-67875/): Malicious code in drunk-moccasin-finch (npm) (malicious package)
- [MAL-2025-67874](https://insights.sbomify.com/MAL-2025-67874/): Malicious code in drunk-aquamarine-llama (npm) (malicious package)
- [MAL-2025-67873](https://insights.sbomify.com/MAL-2025-67873/): Malicious code in driving-maroon-toucan (npm) (malicious package)
- [MAL-2025-67872](https://insights.sbomify.com/MAL-2025-67872/): Malicious code in driving-lavender-crab (npm) (malicious package)
- [MAL-2025-67871](https://insights.sbomify.com/MAL-2025-67871/): Malicious code in driving-gray-silverfish (npm) (malicious package)
- [MAL-2025-67870](https://insights.sbomify.com/MAL-2025-67870/): Malicious code in driving-fuchsia-aardwolf (npm) (malicious package)
- [MAL-2025-6787](https://insights.sbomify.com/MAL-2025-6787/): Malicious code in flatfox-api (PyPI) (malicious package)
- [MAL-2025-67869](https://insights.sbomify.com/MAL-2025-67869/): Malicious code in driving-emerald-mollusk (npm) (malicious package)
- [MAL-2025-67868](https://insights.sbomify.com/MAL-2025-67868/): Malicious code in drewtayga (npm) (malicious package)
- [MAL-2025-67867](https://insights.sbomify.com/MAL-2025-67867/): Malicious code in dreadful-yellow-dragon (npm) (malicious package)
- [MAL-2025-67866](https://insights.sbomify.com/MAL-2025-67866/): Malicious code in dreadful-teal-gazelle (npm) (malicious package)
- [MAL-2025-67865](https://insights.sbomify.com/MAL-2025-67865/): Malicious code in dreadful-olive-cougar (npm) (malicious package)
- [MAL-2025-67864](https://insights.sbomify.com/MAL-2025-67864/): Malicious code in dreadful-aqua-stingray (npm) (malicious package)
- [MAL-2025-67863](https://insights.sbomify.com/MAL-2025-67863/): Malicious code in dramatic-violet-marten (npm) (malicious package)
- [MAL-2025-67862](https://insights.sbomify.com/MAL-2025-67862/): Malicious code in dramatic-purple-quail (npm) (malicious package)
- [MAL-2025-67861](https://insights.sbomify.com/MAL-2025-67861/): Malicious code in dramatic-olive-cricket (npm) (malicious package)
- [MAL-2025-67860](https://insights.sbomify.com/MAL-2025-67860/): Malicious code in dramatic-apricot-tiglon (npm) (malicious package)
- [MAL-2025-6786](https://insights.sbomify.com/MAL-2025-6786/): Malicious code in zoop-web-sdk (npm) (malicious package)
- [MAL-2025-67859](https://insights.sbomify.com/MAL-2025-67859/): Malicious code in dragyg (npm) (malicious package)
- [MAL-2025-67858](https://insights.sbomify.com/MAL-2025-67858/): Malicious code in drab-plum-cod (npm) (malicious package)
- [MAL-2025-67857](https://insights.sbomify.com/MAL-2025-67857/): Malicious code in drab-pink-anaconda (npm) (malicious package)
- [MAL-2025-67856](https://insights.sbomify.com/MAL-2025-67856/): Malicious code in drab-coffee-reindeer (npm) (malicious package)
- [MAL-2025-67855](https://insights.sbomify.com/MAL-2025-67855/): Malicious code in drab-azure-mosquito (npm) (malicious package)
- [MAL-2025-67854](https://insights.sbomify.com/MAL-2025-67854/): Malicious code in doubtful-turquoise-sturgeon (npm) (malicious package)
- [MAL-2025-67853](https://insights.sbomify.com/MAL-2025-67853/): Malicious code in doubtful-black-xerinae (npm) (malicious package)
- [MAL-2025-67852](https://insights.sbomify.com/MAL-2025-67852/): Malicious code in double-white-barracuda (npm) (malicious package)
- [MAL-2025-67851](https://insights.sbomify.com/MAL-2025-67851/): Malicious code in double-sapphire-urial (npm) (malicious package)
- [MAL-2025-67850](https://insights.sbomify.com/MAL-2025-67850/): Malicious code in double-purple-lemming (npm) (malicious package)
- [MAL-2025-6785](https://insights.sbomify.com/MAL-2025-6785/): Malicious code in zano_ui (npm) (malicious package)
- [MAL-2025-67849](https://insights.sbomify.com/MAL-2025-67849/): Malicious code in double-harlequin-rattlesnake (npm) (malicious package)
- [MAL-2025-67848](https://insights.sbomify.com/MAL-2025-67848/): Malicious code in double-gold-fish (npm) (malicious package)
- [MAL-2025-67847](https://insights.sbomify.com/MAL-2025-67847/): Malicious code in double-crimson-bee (npm) (malicious package)
- [MAL-2025-67846](https://insights.sbomify.com/MAL-2025-67846/): Malicious code in double-coffee-meerkat (npm) (malicious package)
- [MAL-2025-67845](https://insights.sbomify.com/MAL-2025-67845/): Malicious code in double-azure-xerinae (npm) (malicious package)
- [MAL-2025-67844](https://insights.sbomify.com/MAL-2025-67844/): Malicious code in double-azure-flyingfish (npm) (malicious package)
- [MAL-2025-67843](https://insights.sbomify.com/MAL-2025-67843/): Malicious code in dominant-teal-gerbil (npm) (malicious package)
- [MAL-2025-67842](https://insights.sbomify.com/MAL-2025-67842/): Malicious code in dominant-sapphire-toucan (npm) (malicious package)
- [MAL-2025-67841](https://insights.sbomify.com/MAL-2025-67841/): Malicious code in dominant-rose-ostrich (npm) (malicious package)
- [MAL-2025-67840](https://insights.sbomify.com/MAL-2025-67840/): Malicious code in dominant-gold-toad (npm) (malicious package)
- [MAL-2025-6784](https://insights.sbomify.com/MAL-2025-6784/): Malicious code in work-planner-client (npm) (malicious package)
- [MAL-2025-67839](https://insights.sbomify.com/MAL-2025-67839/): Malicious code in dominant-fuchsia-silkworm (npm) (malicious package)
- [MAL-2025-67838](https://insights.sbomify.com/MAL-2025-67838/): Malicious code in domestic-salmon-fish (npm) (malicious package)
- [MAL-2025-67837](https://insights.sbomify.com/MAL-2025-67837/): Malicious code in domestic-orange-capybara (npm) (malicious package)
- [MAL-2025-67836](https://insights.sbomify.com/MAL-2025-67836/): Malicious code in domestic-crimson-tarantula (npm) (malicious package)
- [MAL-2025-67835](https://insights.sbomify.com/MAL-2025-67835/): Malicious code in domestic-crimson-chameleon (npm) (malicious package)
- [MAL-2025-67834](https://insights.sbomify.com/MAL-2025-67834/): Malicious code in domestic-copper-iguana (npm) (malicious package)
- [MAL-2025-67833](https://insights.sbomify.com/MAL-2025-67833/): Malicious code in domestic-coffee-gazelle (npm) (malicious package)
- [MAL-2025-67832](https://insights.sbomify.com/MAL-2025-67832/): Malicious code in domestic-beige-raven (npm) (malicious package)
- [MAL-2025-67831](https://insights.sbomify.com/MAL-2025-67831/): Malicious code in dizzy-red-prawn (npm) (malicious package)
- [MAL-2025-67830](https://insights.sbomify.com/MAL-2025-67830/): Malicious code in dizzy-red-haddock (npm) (malicious package)
- [MAL-2025-6783](https://insights.sbomify.com/MAL-2025-6783/): Malicious code in web3-plugin-swisstronik (npm) (malicious package)
- [MAL-2025-67829](https://insights.sbomify.com/MAL-2025-67829/): Malicious code in dizzy-lime-woodpecker (npm) (malicious package)
- [MAL-2025-67828](https://insights.sbomify.com/MAL-2025-67828/): Malicious code in dizzy-aquamarine-jay (npm) (malicious package)
- [MAL-2025-67827](https://insights.sbomify.com/MAL-2025-67827/): Malicious code in dizzy-aquamarine-goldfish (npm) (malicious package)
- [MAL-2025-67826](https://insights.sbomify.com/MAL-2025-67826/): Malicious code in divine-turquoise-ptarmigan (npm) (malicious package)
- [MAL-2025-67825](https://insights.sbomify.com/MAL-2025-67825/): Malicious code in divine-peach-heron (npm) (malicious package)
- [MAL-2025-67824](https://insights.sbomify.com/MAL-2025-67824/): Malicious code in divine-orange-clam (npm) (malicious package)
- [MAL-2025-67823](https://insights.sbomify.com/MAL-2025-67823/): Malicious code in divine-indigo-mammal (npm) (malicious package)
- [MAL-2025-67822](https://insights.sbomify.com/MAL-2025-67822/): Malicious code in divine-bronze-roundworm (npm) (malicious package)
- [MAL-2025-67821](https://insights.sbomify.com/MAL-2025-67821/): Malicious code in divine-amaranth-boa (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/360/